The Development of Personal Data Protection Law in Indonesia: Challenges and Prospects for the Implementation of Law No. 27 of 2022
Main Article Content
Abstract
Indonesia’s enactment of Law No. 27 of 2022 on Personal Data Protection (PDP Law) marks a significant milestone in the country’s legal landscape, aligning national regulations with global standards such as the European Union’s General Data Protection Regulation (GDPR). This qualitative research examines the evolution of personal data protection law in Indonesia, the main challenges encountered during the initial phase of implementation, and the prospects for effective enforcement. The study employs a normative legal approach, analyzing statutory provisions, secondary legal materials, and recent case studies. Findings indicate that while the PDP Law provides a comprehensive legal framework and establishes clear rights and obligations for data controllers and subjects, substantial challenges remain, including institutional readiness, public awareness, and enforcement capabilities. The paper concludes by discussing the prospects for robust data protection in Indonesia and offers recommendations for strengthening the implementation of the PDP Law.
Downloads
Article Details

This work is licensed under a Creative Commons Attribution 4.0 International License.
References
Abubakar, N. S. J., Paradji, N.-S. U., Saggap, S., Anding, N. S., Tano, R. M., Arasani, A. H., Ahadain, D. R., Banda, B., Jayari, R., Alamhalil, A., Alih, S. H., & Tahil, S. K. (2024). Hacking Incidents and their Long-Term Implications for User Privacy and Trust. Cognizance Journal of Multidisciplinary Studies, 4(12), 443–453. https://doi.org/10.47760/cognizance.2024.v04i12.041
Adwani, A. (2025). The Evolution of Digital Payments: Implications for Financial Inclusion and Risk Management. In Multidisciplinary Research Nexus: Ideas for the Modern World. San International Scientific Publications. https://doi.org/10.59646/mrnc6/321
Anggraini, D. I., & Putra, P. O. H. (2025). Data Protection Impact Assessment Framework in the Banking Sector in Indonesia to Implement Law of Personal Data Protection. Jurnal Sistem Informasi, 21(1), 15–34. https://doi.org/10.21609/jsi.v21i1.1439
Ehrenhard, M., Delgado, M. M., Corrales, C., & Guariento, D. (2024). Rural digital transformation: Fostering economic growth by access to services. Open Access Government, 44(1), 446–447. https://doi.org/10.56367/OAG-044-11499
Gani, N. (2024). Legal Politics and Data Protection in Indonesia: A Case Study of the National Data Center Hacking. SASI, 30(3), 296. https://doi.org/10.47268/sasi.v30i3.2213
Hukom, S., Humi, N., & Lukman, I. (2025). The Urgency of Legal Regulation for Personal Data Protection in Indonesia in the Big Data Era. Hakim: Jurnal Ilmu Hukum Dan Sosial, 3(1), 974–992. https://doi.org/10.51903/hakim.v3i1.2291
Judijanto, L., Solapari, N., & Putra, I. (2024). An Analysis of the Gap Between Data Protection Regulations and Privacy Rights Implementation in Indonesia. The Easta Journal Law and Human Rights, 3(01), 20–29. https://doi.org/10.58812/eslhr.v3i01.351
Kusuma, I. G. G. W. (2024). LAW ENFORCEMENT BY THE POLICE AGAINST JUVENILE BRAWLERS RESULTING IN FATALITIES. Airlangga Development Journal, 8(2), 162–172. https://doi.org/10.20473/adj.v8i2.65119
Lihawa, R. (2025). Digital Privacy Crisis: Legal Protection of Social Media Users’ Data in Indonesia’s 2022 Law. Estudiante Law Journal, 7(1), 280–296. https://doi.org/10.33756/eslaj.v7i1.30980
Nafaril, A. N., & Ramadhan, Y. (2024). Factors Affecting Micro Small and Medium Enterprises Taxpayer Compliance at Cilegon Pratama Tax Office. Journal La Sociale, 5(2), 359–371. https://doi.org/10.37899/journal-la-sociale.v5i2.1088
Nasution, N. A. A. (2024). Peran Asosiasi Penyelenggara Jasa Internet Indonesia (APJII) Sumatera Utara dalam Mensosialisasikan Keamanan Berinternet kepada Masyarakat menurut Perspektif Komunikasi Islam. Al-Balagh : Jurnal Komunikasi Islam, 8(1), 24. https://doi.org/10.37064/ab.jki.v8i1.21463
Nuzul Sa’adah, B. L., Sukarmi, S., & Dewantara, R. (2024). Establishing A Personal Data Protection Agency for E-Commerce in Indonesia. Invest Journal of Sharia & Economic Law, 4(2), 292–316. https://doi.org/10.21154/invest.v4i2.10031
Omar, Z., Abdul Hamid, N., & @ Mohd Nor, F. M. (2024). A Systematic Literature Review on Government Non- Financial Assistance towards SMEs Export Performance. International Journal of Research and Innovation in Social Science, VIII(XIX), 143–152. https://doi.org/10.47772/IJRISS.2024.ICAME2411
Perdana, A., & Arifin, S. (2023). Finding a fix for Indonesia’s data protection problems (R. Ernunsari (Ed.)). https://doi.org/10.54377/130f-dbb9
Prayuti, Y. (2024). Implications of Personal Data Protection Law in Consumer Health Data Management to Improve Secure and Confidential Handling in Indonesia. Jurnal Ius Constituendum, 9(3), 461–478. https://doi.org/10.26623/jic.v9i3.9289
Sargiotis, D. (2024). Legal and Regulatory Considerations in Data Governance. In Data Governance (pp. 445–466). Springer Nature Switzerland. https://doi.org/10.1007/978-3-031-67268-2_15
Triyanti, N., Handayani, I. G. A. K. R., & Karjoko, L. (2025). Legal Gaps in Personal Data Protection: Reforming Indonesia’s Population Administration Law. Hasanuddin Law Review, 11(1), 132. https://doi.org/10.20956/halrev.v11i1.6177
Utomo, S. (2024). Personal Data Protection Through Law Number 27 Of 2022: Challenges Of Cybercrime in The Era of Globalization and Digital. Pena Justisia: Media Komunikasi Dan Kajian Hukum, 23(3), 2967–2975. https://doi.org/10.31941/pj.v23i3.5611
Zanuba, S., Saputri, M. M., & Sami’an, S. (2025). Legal Protection of Persons with Mental Disorders in Health Services in Accordance with Laws and Regulations in Indonesia. Jurnal Hukum Indonesia, 4(2), 86–94. https://doi.org/10.58344/jhi.v4i2.1615
Zuwanda, Z. S., Judijanto, L., Khuan, H., & Triyantoro, A. (2024). Normative Study of Law No. 27 of 2022 on the Protection of Personal Data and its Impact on the Fintech Industry in Indonesia. West Science Law and Human Rights, 2(04), 421–428. https://doi.org/10.58812/wslhr.v2i04.1367